ANTI-FRAUD REMOTE CASH TRANSACTION SYSTEM 



CLAIM FOR PRIORITY 

[0001] This application claims priority of U.S. provisional patent applications 
No. 60/438574 filed on January 9, 2003, No. 60/463535 filed on April 18, 2003, 
and Nos. 60/488985, 60/488987 and 60/488988 filed on July 22, 2003, which are 
hereby incorporated in this application. 

CROSS REFERENCE TO RELATED APPLICATIONS 

[0002] Certain embodiments of the present invention may find utility in 
combination with the teachings of our copending applications filed concurrently 
herewith and hereby incorporated by reference in their entirety: 

• Anti-Fraud POS Transaction System (attorney docket 7443-101) 

• Anti-Fraud Document Transaction System (attorney docket 7443-103) 

BACKGROUND OF THE INVENTION 

[0003] Because of the potential for fraud associated with checks, debit cards, 
and credit cards, cash is often preferred as the payment instrument for many 
transactions. For people under legal age and/or with insufficient credit history, 
cash may be the only available payment instrument for purchasing goods and 
services. 

[0004] Although it is convenient to use cash for point-of-sale transactions in 
which both the payer and the payee are actually present, it is less suitable for 
remote transactions because cash can be stolen easily during transportation from 
the payer to the payee, and conducting a remote transaction through cash 
payment can be complicated and expensive. As a result, some financial 
institutions provide special services for cash-based remote transactions, wherein 
the payer transfers cash or cash equivalents to the financial institution, and the 
payee receives the cash payment at a remote branch of the same financial 
institution or its affiliate organization. 

[0005] Since a financial institution only has a limited number of branches, the 
payer and payee may need to travel a long distance to the branches of the 
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financial institution in order to conduct a cash transaction. It is very inconvenient 
and expensive to do so. In addition, branches of financial institutions seldom 
open 24 hours a day, 7 days a week. In the event of an emergency occurring at 
night or during the weekend and the payee needs cash payment urgently, there 
may be no solution at all. For example, a traveler, who cannot use checks, credit 
cards or debit cards, may encounter a major problem when he loses his wallet in 
the middle of night in a city 3,000 miles away from any relatives or friends. 

[0006] The USA PATRIOT Act and the Bank Secrecy Act further complicate the 
situation by requiring financial institutions to conduct customer identification 
checks and to monitor and report suspicious cash transactions. Financial 
institutions have to go through a complicated procedure in order to comply with 
laws. Consequently, financial institutions have to charge high fees in order to 
cover their cost associated with remote cash transactions. The high cost and 
overhead to the payer and payee often makes it impractical for them to conduct a 
remote cash transaction. 

[0007] With advanced technology, people often conduct transactions remotely 
through the Internet, telephone, etc. Since there is no easy and accurate way for 
the merchant to verify the identity of a remote payer, a con artist with a stolen 
credit card or debit card number or a bank account number can easily commit 
fraud through remote transactions. Merchants are suffering a huge amount of 
losses as a result of this kind of fraud. Victims, i.e., the real account holders, 
have to go through a frustrating process to prove their innocence even if they are 
not liable for the losses. Therefore, it is important to protect the account 
information of a credit card, debit card or a bank account during a transaction. 

SUMMARY OF THE INVENTION 

[0008] The present invention relates generally to financial transactions. More 
specifically, the present invention provides anti-fraud measures implemented 
through networks for remote transactions using cash as the payment instrument 
from general-purpose financial accounts such as checking, savings, credit card, 
or debit card accounts. 

[0009] In this document, the terminology "network" or "networks" generally 
refers to a communication network or networks, which can be wireless or wired, 
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private or public, or a combination of them, and includes the well-known Internet. 
Similarly, "bank" or "financial institution" generally refers to a financial service 
provider, either a bank or a non-bank, where financial services are provided; and 
"bank account" or "financial account" generally refers to an account in a financial 
institution, either a bank or a non-bank, where financial transactions are 
conducted through payment instruments such as checks, credit cards, debit 
cards, electronic fund transfers, etc. 

[0010] One objective of the present invention is to provide an effective and 
efficient solution to conduct remote transactions using cash as the payment 
instrument at any time, anywhere over the world. Another objective is to prevent 
fraud committed by payees (e.g., cash recipients), payers (i.e., account holders) 
and/or third parties (i.e., con artists), associated with such transactions. 

[001 1] According to one aspect of the present invention, the payer is 
authenticated and the availability of funds is verified by the payer's financial 
institution before the transaction is completed, the funds are immediately secured 
during the transaction so that the payer cannot deny the transaction later or 
otherwise commit payer fraud on the payee. 

[0012] In accordance with another aspect of the present invention, a payee is 
prevented from entering into an unauthorized transaction or modifying any 
transaction since only the payer can initiate a transaction for a specific payee with 
a specific transaction amount so that the payee cannot commit payee fraud. 

[0013] In accordance with yet another aspect of the present invention, both the 
payee and the payer are authenticated and the details of the entire transaction 
are securely verified and maintained in such a way that no third party has a 
chance to alter any part of the transaction, thereby preventing third party fraud. 

BRIEF DESCRIPTION OF THE FIGURES 

[0014] Fig. 1 represents certain exemplary embodiments for anti-fraud systems 
for cash payments to remote payees from a payer's bank account, a credit card 
account or a debit card account. 

[0015] Fig. 2 (comprising Fig. 2A and Fig. 2B) is a flow chart for an exemplary 
process that may be used in the systems of Fig. 1 . 
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DETAILED DESCRIPTION OF CERTAIN PREFERRED 
EMBODIMENTS AND COMBINATIONS OF 
EMBODIMENTS 

[0016] The present invention is part of a comprehensive suite of anti-fraud 
payment systems, which are applicable not only to such traditional payment 
instruments such as checks, credit cards and debit cards, but also to other 
transaction methodologies that have been or will be developed to support 
electronic commerce between parties that do not have established credit with one 
another, and potentially includes a number of embodiments to provide maximum 
flexibility so that these payment systems can satisfy many different needs, of both 
sophisticated and unsophisticated users. Accordingly, we will describe in detail 
only a few examples of certain preferred embodiments and combinations of the 
embodiments of the present invention; other inventive anti-fraud payment 
systems are disclosed in or will otherwise be apparent from the above-referenced 
copending applications. 

[0017] Fig. 1 illustrates certain preferred embodiments of system for conducting 
remote cash transactions through a bank account, a credit card account or a 
debit card account, using a Remote Payment Center ("RPC") 450 

[0018] Reference should now be made to the flowchart of Fig. 2 in combination 
with the system diagram of Fig. 1, which together illustrate the operation of 
various embodiments of the system aspects of the present invention. 

[0019] As indicated in block 4001 , payer 400 must first open an account with the 
Remote Payment Center ("RPC") 450 before being able to enter into any anti- 
fraud remote cash payment transactions. A comprehensive verification process 
is required to authenticate the payer's identity. In one embodiment of the present 
invention, the payer opens the RPC account through his/her existing financial 
institution 460. Some identification information such as user ID, password, 
driver's license number, social security number, name, address, data of birth, 
phone number, etc., must be verified by the payer's financial institution and 
stored into the customer database of the RPC system. In addition, bank account 
numbers and credit card or debit card account numbers of the account holder 
must be authenticated and stored in the customer database of the RPC system. 
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Although as currently contemplated the RPC 450 is independent of the other 
financial institutions, it could be established exclusively by or for one specific 
financial institution to provide services to the customers of that financial 
institution. 

[0020] In another embodiment of the present invention, the payer 400 opens the 
RPC account directly through the RPC system 450, for example using a personal 
computer 405 connected to the RPC system 450 via a secure network 445. The 
payer has to enter into the RPC system payer's identification information such as 
user ID, password, driver's license number, social security number, name, 
address, date of birth, phone number, etc. In addition, bank account numbers 
and credit card or debit card account numbers of the account holder are 
preferably entered and stored in the customer database of the RPC system. 
Then, the RPC system can verify the accuracy of the information provided by the 
payer through appropriate verification processes before opening an account for 
the payer. 

[0021] In yet another alternative embodiment of the present invention, the RPC 
system operator provides the payer with a small identification verification device 
(not shown), which can read the machine-readable, embedded coded data of an 
official identification card (not shown) such as a driver's license or a military ID 
card. The payer 400 connects the identification device to his/her computer 405 
and logs into the RPC system 450 to open an account. This identification device 
reads the embedded coded identification information from payer's official 
identification card and sends the information to the RPC system 450, which then 
verifies payer's identification information with the account holder information of 
the credit card, debit card, or bank accounts identified by the payer. If the 
verification is successful, the payer's RPC account is opened and the payer is 
ready to conduct remote transactions through cash. In other embodiments, a 
radio frequency identification ("RFID") device or other wireless data transmission 
device may be incorporated into the identification card; and the identification 
information is read from the identification card through an RFID reader or other 
wireless data receiver. 

[0022] In still other embodiments, the payer 400 may open the RPC account by 
means of a public RPC terminal 555, which has incorporated the identification 
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device as described above, and which is connected to the RPC system 450 by 
means of a secure network 475. 

[0023] As indicated in block 4002, when the payer 400 intends to issue an anti- 
fraud remote cash payment, he or she logs into the RPC system 450 through the 
network 445, In one embodiment of the present invention, the payer logs into 
the RPC system by entering an assigned User ID and Password. In another 
embodiment of the present invention, the payer has to use the previously 
mentioned identification device to log into the RPC system. The identification 
device reads the embedded coded identification information from payer's official 
identification card and sends the information to the RPC system for verification. 
The login will not be approved without an official identification card containing 
payer's information that matches the account holder information of the RPC 
account as specified by the payer. If a business account is involved, the official 
identification card of the signer can be used. 

[0024] After logging in, the payer 400 enters (block 4003) the payee's name and 
identification information, dollar amount, and other related information. 

[0025] As indicated in block 4004, in one preferred embodiment of the present 
invention, once all the required transaction details have been confirmed, the RPC 
system 450 immediately transfers funds from the payer's selected account 460 to 
the RPC's bank account 470 through ATM network (or other competing real-time 
network) 465. This provision to immediately transfer funds out from the payer's 
account makes sure that the payer cannot commit any fraud. After the funds are 
secured, the RPC system 450 issues a Funds Secured Transaction Identification 
Number ("FSTIN") for the payer 400 to use. 

[0026] As indicated in block 4005, the payer then gives this FSTIN to the payee 
410. The process of entering information and receiving a "FSTIN" can be 
completed either manually, or through a computer that runs a secure software 
package, or an equivalent apparatus such as an advanced phone to do it 
automatically. In other embodiments, the funds are not so secured in advance, 
and only a Transaction Identification Number ("TIN") is issued. 

[0027] Once the payer has authorized the payment, the payee can request the 
payment at any RPC service depot. For example, the payee 410 may use an 
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ATM 555 that is connected to the RPC 450 by means of an ATM network 475. In 
other embodiments, the RPC service depot may be based on a check-cashing 
terminal or other similar terminals where cash is available for withdrawal, or a 
stand-alone kiosk. As indicated in block 4006, the payee inserts his driver's 
license or other identification card 130, and enters the FSTIN or TIN to identify 
the transaction. The ATM terminal reads the embedded coded identification 
information of the payee from the identification card and sends it with the FSTIN 
to the RPC system (block 4007). Registration of the payee with the RPC system 
and/or verifiable biometric information from the payee may be required to verify 
the payee's identity for higher security protection. 

[0028] In other embodiments, the payee may be permitted to log into the RPC 
system based on the FSTIN or TIN, without any machine readable identification 
card, particularly if only small dollar amounts are involved. For privacy and 
security protection, the payee may be prompted to enter some unique personal 
information about the payee (such as a social security number or a previously 
registered fingerprint) and/or information about the transaction such as the dollar 
amount and the payer's name or a password given by the payer. 

[0029] In embodiments involving larger dollar amounts, the payee may be 
required to go to a cashier at a full service bank to request a cash payment from 
the RPC's bank. This action may be indicated if the transaction amount exceeds 
the daily limit of the ATM and the payee wants to receive the entire transaction 
amount on the same day. The financial institution selected by the payee is then 
responsible for verifying the identity of the payee, preferably by means of the 
previously mentioned described identification verification device. 

[0030] As indicated in block 4008, based on the FSTIN or TIN, the RPC system 
450 attempts to match the identification information obtained from the payee's 
driver license 130 and/or other information entered by the payee with the payee 
identification information recorded by the payer 400 or otherwise available in the 
database of the RPC system 450. 

[0031] If the identification information matches (YES branch 4009), and the 
specified amount has already been secured (FSTIN), the transaction is approved 
and the RPC system 450 will immediately transfer funds (block 4010) from the 
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payer's RPC account in the RPC bank system 470 through an ATM network 475 
or other similar secure real-time network to the payee 410, with the specified 
amount of cash being released to the payee 410 from the RPC terminal 555 

[0032] Alternatively, if there is a match in the identification information but the 
specified amount has not already been secured (TIN), the RPC system 450 will 
now attempt to transfer the specified amount to the RPC system's bank account 
470 from payer's account at the identified payer financial institution 460 through 
the real-time ATM (or other competing) network 465, whereupon the ATM 
terminal 555 can then issue cash payment (block 4010) to the payee 410 from 
the RPC bank account 470 via the ATM network 475. In either event, the 
specified amount of cash is released to the payee 410 only after the funds have 
been transferred from the payer's account 460 and the payment process is thus 
completed in a manner that either eliminates, or substantially reduces, any risk of 
fraud by payer, payee, or third parties. 

[0033] On the other hand, if the information provided by the payee does not 
match (NO branch 4011), then the payment request is rejected (block 4012). 

[0034] Those skilled in the art will realize that the secure networks 445, 465 and 
475 can in practice be different secure paths over a common public network such 
as the Internet. Those skilled in the art will also realize it is possible to directly 
integrate RPC system 450 into existing ATM, credit card, or debit card networks. 
Moreover, due to the similarity between the RPC systems of the present 
invention and corresponding systems described in the referenced related 
applications, it is contemplated that they may be integrated into a single system 
that provides a universal anti-fraud payment system that can be used for all types 
of transactions. 

[0035] In some embodiments of the present invention, the identification device 
at the payer terminal 405 or payee terminal 555 may be required to read a piece 
of biometric information such as a fingerprint, which will be verified with the 
information stored in the customer database of the RPC system or in the 
identification card. Note that the payer's biometric information is preferably 
available from the RPC database, while for a payee not already registered with 
the RPC system, the payee's biometric information may only be available from 
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the payee's identification card. The login will not be approved for an account 
without a matching piece of biometric information of the account holder. If a 
business account is involved, the biometric information of the signer can be used. 
Driver's license numbers and social security numbers are standard information 
stored inside the customer database of financial institutions today, while biometric 
information is not stored yet. Due to privacy concerns and the high cost involved 
in the identification process, storing biometric information into the customer 
database of a financial institution may not be easily implemented. It may take 
some time to establish a biometric information database in the RPC system. 

[0036] In another alternative embodiment of the present invention, the biometric 
information is stored inside the identification card 130. Once the account holder 
information obtained from the RPC system matches the information obtained 
from the identification card, the identification card is proven to be a valid one. 
Then, the biometric information stored inside the identification card can be used 
to authenticate the identity of the payer. 

[0037] Several possible levels of security can be applied during authentication 
of an account holder during a login process by using different embodiments of the 
present invention. A mixed version of security levels is possible for practical 
business purposes. For example, different levels of security can be required 
based on the dollar amount involved in the transaction. Since the payee cannot 
initiate any transaction, all of the above embodiments and a mixed version of 
them can ensure that the payee cannot fabricate fake transactions based on the 
knowledge about the payer. Since third parties are excluded from the 
transactions, there is no chance for a third party to commit fraud. In practice, a 
trade-off among different security requirements may be chosen in order to 
provide the most cost-effective and user-friendly solution. Such a trade-off 
should not be construed as a deviation from the present invention. 

[0038] Since payer's bank account numbers, credit card or debit card numbers 
are kept confidential by the RPC system, there is no room for fraud committed by 
the payee or any third party. Since payee has no way to initiate a transaction, the 
payee cannot commit fraud against payer. Especially if the transaction funds are 
immediately transferred out from the payer's account (when the FSTIN is used), 
the payer cannot commit fraud against payee. 
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[0039] In other embodiments of the present invention, an agent (not shown) can 
be jointly appointed by the payer and the payee to perform an equivalent escrow 
function based on the terms and conditions agreed upon between the payer and 
the payee. The procedure to issue payment and to receive payment is the same 
as the embodiments described in this document. However, the payment will not 
be released to the payee unless the appointed agent has authorized the action. 
Through this approach, both the payer's and the payee's interests are fully 
protected, and trading fraud is eliminated. 

[0040] Workers skilled in the art and technology to which this invention pertains 
will appreciate that other alterations and changes in the described structure may 
also be practiced without meaningfully departing from the principal, spirit and 
scope of this invention. 
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